Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-S0O3QqO8g1Y3QBfXzxuVsoRVg.roa
File: 1-S0O3QqO8g1Y3QBfXzxuVsoRVg.roa (raw, json)
Hash identifier: X/sY7DqLQNB25a9OpKJNWeYUVhs3pLj9+M6RpinfB2Q=
Subject key identifier: D7:E4:B4:3B:74:2A:3B:C8:35:63:74:01:7D:7C:F1:B9:5B:28:45:58
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE7152FCFC0677C6ADB80357521649B5A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-S0O3QqO8g1Y3QBfXzxuVsoRVg.roa
Signing time: Sat 30 Sep 2023 17:13:59 +0000
ROA not before: Sat 30 Sep 2023 17:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e7:15:2f:cf:c0:67:7c:6a:db:80:35:75:21:64:9b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 17:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7e4b43b742a3bc8356374017d7cf1b95b284558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:98:10:c6:56:c1:00:0b:52:a7:fb:ec:43:
a9:f5:d3:d7:12:ec:92:a4:e2:85:16:97:00:88:f2:
b0:af:bc:f7:d1:48:27:f8:21:1e:1e:00:4f:e7:bd:
7a:a1:bd:4a:6a:33:70:00:1c:ae:1b:1d:bc:bf:32:
47:4f:b0:d4:65:07:05:ca:f0:39:2f:03:0c:ac:54:
af:7a:36:0c:a3:5c:e7:72:df:d9:7d:05:84:c1:d5:
ec:9a:6f:9a:98:ea:73:af:9b:f9:d8:97:23:78:bb:
3b:1c:fd:3a:b1:2a:5e:ee:d1:ee:1f:a0:68:47:20:
eb:25:d9:c0:9a:68:3a:c5:ee:06:a1:19:3e:9a:94:
6c:22:9b:ec:0a:3d:ff:cb:d5:5d:5a:6c:e1:58:46:
c4:bb:3f:9c:a6:36:ce:62:a5:bd:13:c4:f3:b6:f5:
fc:c9:d6:48:99:57:4e:8b:7f:54:42:7c:26:59:1d:
0a:a6:22:42:bc:36:91:9a:91:cd:6f:dd:0e:a6:4d:
df:83:d2:c7:d0:8e:85:f1:c5:85:0f:25:86:83:8f:
7e:dc:2f:0c:5c:b6:f1:f7:cd:2b:a2:aa:14:93:23:
9e:de:75:df:3a:2f:65:53:55:c2:21:94:55:77:75:
62:2b:ae:d7:05:21:a8:e1:57:91:2f:a8:f5:f6:50:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E4:B4:3B:74:2A:3B:C8:35:63:74:01:7D:7C:F1:B9:5B:28:45:58
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-S0O3QqO8g1Y3QBfXzxuVsoRVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:f1:d5:89:15:f4:54:bb:83:b0:91:81:59:86:3b:78:55:57:
b5:02:d5:b8:10:0f:99:ae:ee:2d:c6:bb:58:5d:af:7e:4a:75:
7e:af:9b:b7:de:12:d3:d5:e5:60:8b:cb:51:8a:e1:0c:53:64:
fa:6d:e7:de:5e:eb:a1:40:1c:1a:d5:a3:51:aa:2b:3d:fb:3d:
5d:24:98:96:bc:35:eb:ce:f4:4f:b5:0d:e4:d8:16:d6:ed:71:
71:b1:1d:70:ae:2b:83:06:7e:6c:16:d4:a7:11:42:a5:05:c3:
ca:cf:89:8f:32:d4:b3:9d:69:51:a8:4d:62:cc:ba:2f:84:bc:
47:53:54:8e:8b:df:be:cf:18:cc:ab:87:b4:2d:94:ef:2e:6f:
3a:94:ba:08:05:1f:f6:ce:1b:2c:a5:a9:a5:8b:fe:31:f2:38:
15:ae:07:42:80:ed:23:4c:57:5b:1e:72:7b:72:e8:33:b5:01:
8c:19:30:62:f5:43:70:06:c8:96:69:be:bd:02:c1:fd:d7:d3:
4d:e0:3c:54:bf:df:58:ca:6f:2a:72:15:97:48:d3:b6:fd:cf:
94:f4:53:d9:a7:0b:c2:2f:d9:bf:02:b5:16:40:27:fd:a9:b9:
e0:7f:00:79:02:ca:ba:0b:c8:fd:cf:d7:6b:af:ec:16:29:6b:
00:e2:bc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:14:04 2025 by rpki-client